PigSearch

Popis: Adware
Úroveň rizika: Vysoké
Datum 1. výskytu: Thursday, May 22, 2008
Poskytovatel Softwaru: (neznámá)
Stručné informace: Pigsearch displays search links related to highlighted text in Internet Explorer Web pages and also displays pop-up advertisements.
Odstranění: Tento škodlivý software může být odstraněn pomocí "Spyware Terminatora"

ODSTRANIT SPYWARE »

Geogr. rozdělení softwaru "PigSearch"

Info o škodlivém softwaru

Zobrazit vše

Detected Items

  1. Detected Files: %SYSDIR%\drivers\hcalway.sys MD5: FC6E467B257CEFEA62BEBC32F4BF245A Size:38784 %PROGRAMFILES%\HuaCi\huaci\zsup.exe MD5: 3192675D5AD47FA6F3989410D200E828 Size:40960 %PROGRAMFILES%\HuaCi\huaci\zsearch.exe MD5: DBFD5DDA88DA50491BA6EC513471B81B Size:143360 %PROGRAMFILES%\HuaCi\huaci\reg.exe MD5: 9868A845A9BC4CD699CBCBF1A3A0C8C2 Size:110592 %PROGRAMFILES%\HuaCi\huaci\mUin.exe MD5: A3A5EC609C05CD0DD6DA8284BA1B6033 Size:49152 %PROGRAMFILES%\wsearch\mupdate.exe MD5: 3BF4C8E1850075D16FBE7AAEA2B7714A Size:40960 %PROGRAMFILES%\wsearch\mUninstall.exe MD5: 843EEC8D22A0A15646C359CE62291C86 Size:20480 %SYSDIR%\drivers\abhcop.sys MD5: BFD763D508297B62C3B522E836A8C318 Size:11264
  2. Detected Files with variable Filenames:

Detecting items list:

  1. Files by Name %ProgramFiles%\wsearch\mouse.dll %ProgramFiles%\wsearch\search.exe %ProgramFiles%\wsearch\zsearch.exe %ProgramFiles%\wsearch\hcalway.sys %ProgramFiles%\wsearch\abhcop.sys %ProgramFiles%\HuaCi\mouse.dll %ProgramFiles%\HuaCi\search.exe %ProgramFiles%\HuaCi\zsearch.exe %ProgramFiles%\HuaCi\hcalway.sys %ProgramFiles%\HuaCi\abhcop.sys %ProgramFiles%\HuaCi\mupdate.exe %ProgramFiles%\HuaCi\SearchM.dll %ProgramFiles%\HuaCi\mUninstal.exel %ProgramFiles%\wsearch\mUninstall.exe %ProgramFiles%\wsearch\mupdate.exe %ProgramFiles%\wsearch\SearchM.dll %Sysdir%\drivers\abhcop.sys %Sysdir%\drivers\hcalway.sys %STARTUP%\ÊÑ.lnk
  2. Files by Directories %ProgramFiles%\wsearch %programfiles%\HuaCi
  3. Files by CLSID or Name CLSID=594BE7B2-23B0-4FAE-A2B9-0C21CC1417CE CLSID=4E1ACE40-F681-4CC4-A7C0-AD1E6C9AD86F CLSID=A07E6B9B-BB30-4381-A9D8-FABB0648BCEF CLSID=FD536575-73F7-42A3-9E9F-11688F1A006A CLSID=C5CE084B-31E0-4B34-A33A-82B4EA913CF8
  4. Registry Keys HKCU\Software\Pig Move Search HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CDSearch HKLM\SOFTWARE\Classes\SearchM.Search HKLM\SOFTWARE\Classes\SearchM.Search.1 HKCR\SOFTWARE\Classes\SearchM.Search HKCR\SOFTWARE\Classes\SearchM.Search.1
  5. Registry Values HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ValueName=MoveSearch Value=%PROGRAMFILES%\HuaCi\huaci\zsearch.exe

« Jít do Databáze softwaru